Re: Password Audit tools

From: Christian Martorella (laramies2k_at_yahoo.com.ar)
Date: 12/14/04

  • Next message: miguel.dilaj_at_pharma.novartis.com: "RE: Port Scanning." 
    Date: Tue, 14 Dec 2004 18:04:04 +0100
To: "Jeffrey M.Miller CISSP" <jmiller@acumeninfosec.com>

    If you are looking for OpenSource alternatives you should check:

    Cain & Abel could be useful for your needs, (http://www.oxid.it/) , it
    has a complete suite of cracking tools.
    Lepton's Crack (http://www.nestonline.com/lcrack/) it's very good, and
    it support regular expressions.
    John The Ripper (http://www.openwall.com/john)

    And for remote password cracking you could use:
    Hydra http://www.thc.org/thc-hydra/

    Hope it helps

    Laramies

    Jeffrey M.Miller CISSP wrote:

    > I've used Internet Security Scanner from ISS and really like it's
    > ability to pull users from NT domains and test common passwords, such
    > as username=password, password=password, etc.
    >
    > I've considered purchasing the consultant version of l0phtcrack LC5.
    >
    > Has anyone used LC5 and can anyone compare it to ISS? Also are there
    > any OpenSource tools that can do these sorts of checks?
    >
    > Thanks
    >
    > J_
    >
    >

  • Next message: miguel.dilaj_at_pharma.novartis.com: "RE: Port Scanning."